program:
r0 = socket$packet(0x11, 0x3, 0x300)
accept4$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800)
recvmmsg(r0, 0x0, 0xfffffffffffffd4f, 0x10100, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x440801, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff)
write(r1, &(0x7f0000000100)='N', 0x1)
write(r2, &(0x7f0000000100)='1', 0x1)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, 0x0)
fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, 0x0)
[ 94.960038][ T5281] Bluetooth: hci0: command tx timeout
[ 95.167593][ T9] FAULT_INJECTION: forcing a failure.
[ 95.167593][ T9] name failslab, interval 1, probability 1, space 0, times 1
[ 95.167642][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.167672][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.167680][ T9] Workqueue: events drm_fb_helper_damage_work
[ 95.167789][ T9] Call Trace:
[ 95.167794][ T9]
[ 95.167800][ T9] dump_stack_lvl+0xe8/0x150
[ 95.167819][ T9] should_fail_ex+0x410/0x560
[ 95.167838][ T9] should_failslab+0xa8/0x100
[ 95.167852][ T9] __kmalloc_noprof+0xfe/0x720
[ 95.167867][ T9] ? __kasan_kmalloc+0x93/0xb0
[ 95.167878][ T9] ? drm_atomic_commit_init+0x9e/0x370
[ 95.167889][ T9] ? drm_atomic_commit_init+0x9e/0x370
[ 95.167923][ T9] drm_atomic_commit_init+0x9e/0x370
[ 95.167939][ T9] drm_atomic_commit_alloc+0xbc/0x100
[ 95.167953][ T9] drm_atomic_helper_dirtyfb+0x129/0xfd0
[ 95.167971][ T9] ? __lock_acquire+0x747/0x2de0
[ 95.167983][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 95.168004][ T9] ? do_raw_spin_lock+0x12b/0x2f0
[ 95.168025][ T9] drm_fbdev_shmem_helper_fb_dirty+0x160/0x310
[ 95.168043][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.168060][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.168094][ T9] ? lock_acquire+0x115/0x350
[ 95.168111][ T9] ? rcu_is_watching+0x16/0xb0
[ 95.168126][ T9] ? process_scheduled_works+0x97a/0x1630
[ 95.168141][ T9] process_scheduled_works+0xc3d/0x1630
[ 95.168200][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.168221][ T9] ? assign_work+0x3cf/0x5d0
[ 95.168239][ T9] worker_thread+0xa47/0xfb0
[ 95.168272][ T9] kthread+0x38b/0x480
[ 95.168285][ T9] ? __pfx_worker_thread+0x10/0x10
[ 95.168298][ T9] ? __pfx_kthread+0x10/0x10
[ 95.168310][ T9] ret_from_fork+0x514/0xb70
[ 95.168324][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 95.168336][ T9] ? __switch_to+0xc89/0x1420
[ 95.168354][ T9] ? __pfx_kthread+0x10/0x10
[ 95.168366][ T9] ret_from_fork_asm+0x1a/0x30
[ 95.168395][ T9]
[ 95.168682][ T4685] FAULT_INJECTION: forcing a failure.
[ 95.168682][ T4685] name failslab, interval 1, probability 1, space 0, times 1
[ 95.168719][ T4685] CPU: 0 UID: 0 PID: 4685 Comm: klogd Not tainted syzkaller #0 PREEMPT(full)
[ 95.168748][ T4685] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.168756][ T4685] Call Trace:
[ 95.168761][ T4685]
[ 95.168765][ T4685] dump_stack_lvl+0xe8/0x150
[ 95.168782][ T4685] should_fail_ex+0x410/0x560
[ 95.168800][ T4685] ? __alloc_skb+0x1db/0x7a0
[ 95.168851][ T4685] should_failslab+0xa8/0x100
[ 95.168863][ T4685] ? __alloc_skb+0x1db/0x7a0
[ 95.168877][ T4685] kmem_cache_alloc_node_noprof+0xa1/0x610
[ 95.168891][ T4685] ? __alloc_skb+0x18d/0x7a0
[ 95.168907][ T4685] ? __alloc_skb+0x1db/0x7a0
[ 95.168925][ T4685] __alloc_skb+0x1db/0x7a0
[ 95.168942][ T4685] alloc_skb_with_frags+0xc6/0x760
[ 95.168966][ T4685] sock_alloc_send_pskb+0x878/0x990
[ 95.168990][ T4685] ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 95.169004][ T4685] ? sock_def_readable+0xae/0x550
[ 95.169020][ T4685] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[ 95.169036][ T4685] unix_dgram_sendmsg+0x4fe/0x1870
[ 95.169061][ T4685] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 95.169086][ T4685] ? aa_sock_msg_perm+0x129/0x210
[ 95.169100][ T4685] ? apparmor_socket_sendmsg+0x98/0x360
[ 95.169118][ T4685] ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 95.169131][ T4685] sock_sendmsg_nosec+0x13a/0x180
[ 95.169146][ T4685] __sys_sendto+0x408/0x5a0
[ 95.169161][ T4685] ? bpf_lsm_capable+0x9/0x20
[ 95.169179][ T4685] ? __pfx___sys_sendto+0x10/0x10
[ 95.169208][ T4685] ? rcu_is_watching+0x16/0xb0
[ 95.169247][ T4685] __x64_sys_sendto+0xde/0x100
[ 95.169265][ T4685] do_syscall_64+0x166/0x520
[ 95.169281][ T4685] ? trace_irq_disable+0x3b/0x140
[ 95.169292][ T4685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.169303][ T4685] ? clear_bhb_loop+0x70/0xc0
[ 95.169317][ T4685] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 95.169328][ T4685] RIP: 0033:0x7f7b32c3a407
[ 95.169341][ T4685] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 95.169350][ T4685] RSP: 002b:00007ffdc960d670 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 95.169363][ T4685] RAX: ffffffffffffffda RBX: 00007f7b32aeac80 RCX: 00007f7b32c3a407
[ 95.169370][ T4685] RDX: 000000000000006c RSI: 00007ffdc960d7b0 RDI: 0000000000000003
[ 95.169377][ T4685] RBP: 00007ffdc960dbe0 R08: 0000000000000000 R09: 0000000000000000
[ 95.169385][ T4685] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffdc960dbf8
[ 95.169392][ T4685] R13: 00007ffdc960d7b0 R14: 0000000000000051 R15: 00007ffdc960d7b0
[ 95.169409][ T4685]
[ 95.175565][ T9] ------------[ cut here ]------------
[ 95.175594][ T9] virtio-pci 0000:00:01.0: [drm] Dirty helper failed: ret=-12
[ 95.175629][ T9] WARNING: drivers/gpu/drm/drm_fbdev_shmem.c:118 at drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310, CPU#0: kworker/0:0/9
[ 95.391807][ T9] Modules linked in:
[ 95.393599][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.397784][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.402446][ T9] Workqueue: events drm_fb_helper_damage_work
[ 95.405145][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.408492][ T9] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 95.416559][ T9] RSP: 0000:ffffc9000022f898 EFLAGS: 00010246
[ 95.419279][ T9] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 95.422859][ T9] RDX: ffff88801f3f6e80 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 95.426124][ T9] RBP: ffff88801d270008 R08: ffffffff907a427f R09: 1ffffffff20f484f
[ 95.429789][ T9] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffff88801f3f6e80
[ 95.433224][ T9] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0
[ 95.436864][ T9] FS: 0000000000000000(0000) GS:ffff88808c2ca000(0000) knlGS:0000000000000000
[ 95.440746][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.443617][ T9] CR2: 00007f7b32ca4380 CR3: 000000001282f000 CR4: 0000000000352ef0
[ 95.448521][ T9] Call Trace:
[ 95.449989][ T9]
[ 95.451292][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.453692][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.456363][ T9] ? lock_acquire+0x115/0x350
[ 95.459571][ T9] ? rcu_is_watching+0x16/0xb0
[ 95.461740][ T9] ? process_scheduled_works+0x97a/0x1630
[ 95.464104][ T9] process_scheduled_works+0xc3d/0x1630
[ 95.466469][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.469300][ T9] ? assign_work+0x3cf/0x5d0
[ 95.471446][ T9] worker_thread+0xa47/0xfb0
[ 95.473508][ T9] kthread+0x38b/0x480
[ 95.475375][ T9] ? __pfx_worker_thread+0x10/0x10
[ 95.477648][ T9] ? __pfx_kthread+0x10/0x10
[ 95.479694][ T9] ret_from_fork+0x514/0xb70
[ 95.481743][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 95.483888][ T9] ? __switch_to+0xc89/0x1420
[ 95.485976][ T9] ? __pfx_kthread+0x10/0x10
[ 95.488276][ T9] ret_from_fork_asm+0x1a/0x30
[ 95.490311][ T9]
[ 95.491644][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.494657][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 95.498415][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.502508][ T9] Workqueue: events drm_fb_helper_damage_work
[ 95.505176][ T9] Call Trace:
[ 95.506711][ T9]
[ 95.508011][ T9] vpanic+0x56d/0xa60
[ 95.509778][ T9] ? __pfx__printk+0x10/0x10
[ 95.511679][ T9] ? __pfx_vpanic+0x10/0x10
[ 95.513741][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 95.516037][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 95.518298][ T9] panic+0xc5/0xd0
[ 95.519881][ T9] ? __pfx_panic+0x10/0x10
[ 95.521835][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 95.524061][ T9] __warn+0x315/0x4c0
[ 95.525829][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.528554][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.531588][ T9] __report_bug+0x276/0x570
[ 95.533620][ T9] ? drm_modeset_acquire_fini+0x27/0x180
[ 95.536090][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x1e1/0x310
[ 95.538885][ T9] ? __pfx___report_bug+0x10/0x10
[ 95.541070][ T9] ? drm_atomic_helper_dirtyfb+0xf27/0xfd0
[ 95.543686][ T9] ? __pfx_drm_atomic_helper_dirtyfb+0x10/0x10
[ 95.546356][ T9] report_bug_entry+0x19b/0x290
[ 95.548512][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.551238][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x28d/0x310
[ 95.554123][ T9] handle_bug+0xce/0x200
[ 95.556049][ T9] exc_invalid_op+0x1a/0x50
[ 95.558061][ T9] asm_exc_invalid_op+0x1a/0x20
[ 95.560219][ T9] RIP: 0010:drm_fbdev_shmem_helper_fb_dirty+0x288/0x310
[ 95.563136][ T9] Code: 29 fc 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 1a 22 9b fc 4d 8b 27 48 89 df 4c 89 f6 4c 89 e2 8b 5c 24 04 89 d9 <67> 48 0f b9 3a 89 d8 e9 f7 fe ff ff 89 d9 80 e1 07 fe c1 38 c1 0f
[ 95.571297][ T9] RSP: 0000:ffffc9000022f898 EFLAGS: 00010246
[ 95.574023][ T9] RAX: 1ffff11003ed641a RBX: 00000000fffffff4 RCX: 00000000fffffff4
[ 95.577429][ T9] RDX: ffff88801f3f6e80 RSI: ffffffff8c79be40 RDI: ffffffff90862150
[ 95.580922][ T9] RBP: ffff88801d270008 R08: ffffffff907a427f R09: 1ffffffff20f484f
[ 95.584377][ T9] R10: dffffc0000000000 R11: fffffbfff20f4850 R12: ffff88801f3f6e80
[ 95.587792][ T9] R13: dffffc0000000000 R14: ffffffff8c79be40 R15: ffff88801f6b20d0
[ 95.591270][ T9] ? drm_fbdev_shmem_helper_fb_dirty+0x260/0x310
[ 95.594095][ T9] drm_fb_helper_damage_work+0x84c/0xf20
[ 95.596567][ T9] ? __pfx_drm_fb_helper_damage_work+0x10/0x10
[ 95.599288][ T9] ? lock_acquire+0x115/0x350
[ 95.601420][ T9] ? rcu_is_watching+0x16/0xb0
[ 95.603646][ T9] ? process_scheduled_works+0x97a/0x1630
[ 95.606290][ T9] process_scheduled_works+0xc3d/0x1630
[ 95.608847][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.611432][ T9] ? assign_work+0x3cf/0x5d0
[ 95.613345][ T9] worker_thread+0xa47/0xfb0
[ 95.615467][ T9] kthread+0x38b/0x480
[ 95.617320][ T9] ? __pfx_worker_thread+0x10/0x10
[ 95.619591][ T9] ? __pfx_kthread+0x10/0x10
[ 95.621680][ T9] ret_from_fork+0x514/0xb70
[ 95.623739][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 95.626019][ T9] ? __switch_to+0xc89/0x1420
[ 95.628115][ T9] ? __pfx_kthread+0x10/0x10
[ 95.630287][ T9] ret_from_fork_asm+0x1a/0x30
[ 95.632512][ T9]
[ 95.634296][ T9] Kernel Offset: disabled
[ 95.636181][ T9] Rebooting in 86400 seconds..